http://eprint.iacr.org/2014/435.pdf

Just wanted to make sure the LibreSSL team had seen this. Sorry about the
lack of proper formatting - I figure sending the issue here is considerably
more likely to get a response than OpenSSL's request tracker.

Page 18, under Countermeasures -> Cache Flushing, shows their recommended
solution. It would probably make for additional good press to have LibreSSL
have a countermeasure in place long before OpenSSL.

Cheers! I will continue to follow the LibreSSL updates and await a stable
release.

 - Jeff McJunkin

Reply via email to